Resolved-without-proof findings
QuickSwap's assessment for RD-F-003 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
C4 Sep 2022: 1 HIGH (H-01 cooldown manipulation, confirmed by sponsor) and 12 MEDIUM findings. Resolution status: C4 public report marks findings as confirmed/acknowledged but does not provide on-chain bytecode verification for each fix. H-01 was confirmed — post-launch deployment of AlgebraFactory (0x411b0fAcC3489691f28ad58c47006AF5E3Ab3A28) is the live version; no independent on-chain proof that H-01 was patched before the Oct 7, 2022 launch vs. after. M-10 (initialize front-running) was disputed by sponsor. Algebra Hacken PDF not publicly accessible for individual finding verification. V2: ABDK FV found issues resolved at commit 8160750; QuickSwap V2 core is at that exact zero-divergence state — no unresolved V2 findings. Scoring yellow for V3 due to unverifiable H-01 resolution timeline.
Sources #
- AuditCode4rena 2022-09 QuickSwap Full ReportC4 2022-09 findings — H-01 confirmed, resolution timing not verifiable on-chainretrieved 2026-05-16
- code-423n4/2022-09-quickswap findings repositoryC4 findings repo — sponsor responses per issueretrieved 2026-05-16
Methodology #
Count the number of findings the audit report marks "Resolved" or "Fixed" where no matching on-chain bytecode change or verifiable commit can be found.
See the full factor methodology and distribution across all protocols →